Re: add a MAC check for TRUNCATE

Yuli Khodorkovskiy <yuli.khodorkovskiy@crunchydata.com>

From: Yuli Khodorkovskiy <yuli.khodorkovskiy@crunchydata.com>

To: Alvaro Herrera <alvherre@2ndquadrant.com>

Cc: Joe Conway <mail@joeconway.com>, Tom Lane <tgl@sss.pgh.pa.us>, Stephen Frost <sfrost@snowman.net>, Kohei KaiGai <kaigai@heterodb.com>, pgsql-hackers@lists.postgresql.org, Joshua Brindle <joshua.brindle@crunchydata.com>, Mike P <mike.palmiotto@crunchydata.com>

Date: 2019-09-25T21:40:35Z

Lists: pgsql-hackers

Attachments

Truncate-Hook.patch (application/octet-stream) patch 0001
v3-Sepgsql-Truncate.patch (application/octet-stream) patch v3-0002

On Wed, Sep 25, 2019 at 3:57 PM Alvaro Herrera <alvherre@2ndquadrant.com> wrote:
>
> Hello
>
> On 2019-Sep-09, Yuli Khodorkovskiy wrote:
>
> > I have included an updated version of the sepgql patch. The
> > Truncate-Hook patch is unchanged from the last version.
>
> This patch no longer applies.  Can you please rebase?

Hi Alvaro,

I have attached the updated patches which should rebase.

Since all existing DAC checks should have MAC, should these patches be
considered a bug fix and therefore back patched?

Thank you

Commits

Update sepgsql to add mandatory access control for TRUNCATE
- 4f66c93f6143 13.0 landed
Add object TRUNCATE hook
- f7a2002e82cf 13.0 landed
postgres_fdw: Fix error message for PREPARE TRANSACTION.
- 879c11761571 13.0 cited